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(57) Abstract 

In a broadband cable data network (10), a method and system for automatically allocating network resources such as IP addresses 
to control access to the network utilizes at least one DHCP server (12), and a common network database formed from a LDAP directory 
(22) for storing respective user configuration parameters, hardware address registration, and current binding information. A DHCP server 
(12) can add new hardware address registrations to the LDAP using an "unregistered* 1 service class. The DHCP server sends a DHCP 
reply tailored for unregistered devices, such as by allocating a privately-allocated IP address with no Internet access, or an IP address for a 
self-provisioning web server. A DHCP server views IP address allocation as having a short duration. Thus, if the IP network configuration 
does not change, user terminal will continue to receive the same allocated IP address due to the DHCP server's perception of an indefinite 
lease. The consistency of the IP addresses simplifies many operational concerns about dynamic addresses, such as minimizing DNS (domain 
name service) hostname updates, mapping IP addresses to user terminals during security incidents, etc. 
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METHOD AND SYSTEM FOR AUTOMATIC 
ALLOCATION OF RESOURCES IN A NETWORK 

Technical Field 

5 The present invention generally relates to 

systems for providing internetwork data distribution, 
such as the Internet, over a broadband cable data net- 
work, and more particularly to an improved arrangement 
for resource allocation by a dynamic host configuration 
10 protocol (DHCP) server in such a data distribution 
system. 

Back ground Art 

Generally, network resources such as Internet 
protocol (IP) addresses are allocated by DHCP servers 

15 using one of three methods: (1) "automatic allocation"; 

(2) "dynamic allocation"; and (3) "manual allocation". 
In automatic allocation, a DHCP server assigns a perma- 
nent IP address to a user or subscriber terminal . In 
dynamic allocation, a DHCP server assigns an IP address 

20 to a user terminal for a limited period of time, or 
until the user explicitly relinquishes the address. In 
manual allocation, an IP address is assigned to a user 
terminal by a network administrator, and a DHCP server 
is merely used to convey the assigned address to the 

25 user. Conventional networks can use one or more of 
these methods, as determined by the policies of the 
network admini st rator . 



WO 99/33215 



PCT/US98/27313 



-2- 

However, none of these three methods of 
allocating IP addresses has proven fully satisfactory 
because of an inability to both ensure automatic, 
uninterrupted operation of a DHCP server while also 
5 maximizing flexibility in DHCP operation and service. 
In addition, a major function of a DHCP server is to 
balance the use of limited network resources so that all 
users will have an opportunity to gain access to the 
network. The above described IP allocation methods are 

10 inherently inefficient in providing such balancing of 
network use. For example, automatic allocation is 
inefficient because allocation of IP addresses is not 
based on actual use or need. Manual allocation is 

inefficient with respect to management of the network 

15 (manual allocation) because of the requisite human 
interaction. Finally, dynamic allocation is too conser- 
vative in IP allocation to truly support an "always-on" 
type network service, i.e., a network where users do not 
have to continually log- on and off to gain access to the 

20 desired network services. 

Bisclosere Off The Imvenlfioiii 

It is therefore an object of the present 
invention is to provide a resource allocation which 
overcomes the above-noted deficiencies of known alloca- 
25 tion methods. 

It is another object of the present invention 
to provide a method of resource allocation in an intern- 
etwork type cable distribution system which ensures 
uninterrupted, correct operation of a DHCP server while 
3 0 also maximizing DHCP server flexibility. 
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It is yet another object of the present 
invention is to provide a DHCP server which can support 
multiple synchronized DHCP servers in order to remove 
single points of failure. 

5 It is still a further object of the present 

invention to provide a DHCP server which can support a 
flexible IP network configuration, such as multiple IP 
subnets on the same physical Ethernet, and allows 
graceful reconfiguration of the IP network such as 
10 splitting a physical Ethernet into multiple LANs. 

It is still another object of the present 
invention is to provide a DHCP server which maximizes 
potential user service differentiation by sending 
specific configuration parameters to user premise 
15 equipment such as Pes, Macs, LANcity cable modems, in 
support of a plurality of different service tiers. 

To maximize DHCP server flexibility, the DHCP 
server of the present invention uses standard network 
protocols where possible, notwithstanding that a stan- 

20 dard DHCP server synchronization protocol has not been 
adapted by the industry. In particular, an LDAP (Light- 
weight Directory Access Protocol) directory operates as 
a DHCP server database, thereby permitting tight inte- 
gration of subscriber personal information with sub- 

25 scriber device information. 

In accordance with the present invention, a 
DHCP server views IP address allocation as indefinite, 
while a user terminal/premise equipment will view an IP 
address allocation as having a short duration, e.g., one 
30 day or less. Thus, if the IP network configuration does 
not change, the user terminal will continue to receive 
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the same allocated IP address due to the DHCP server's 
perception of an indefinite lease. The consistency of 
the IP addresses simplifies many operational concerns 
about dynamic addresses, such as minimizing DNS (domain 
5 name service) hostname updates, mapping IP addresses to 
user terminals during security incidents , etc . 

In addition, if the IP network configuration 
does change, the user terminal will renew and/or rebind 
quickly, due to the user's perception of a short alloca- 

10 tion duration. This flexibility with respect to IP 

network changes (due to short allocation reservation 
times) assists a graceful network reconfiguration. As 
part of the reconfiguration process, a "snapshot" of IP 
address mappings can be made just prior to reconfigura- 

15 tion so as to support imminent security incidents. The 
reconfiguration will be complete upon expiration of the 
maximum allocated address reservation time. 

The above objects and other objects, features, 
and advantages of the present invention are readily 
2 0 apparent from the following detailed description of the 
best mode for carrying out the invention when taken in 
connection with the accompanying drawings. 

Brneff Description Of The Brawinmgs 

FIGURE 1 is a block diagram of a broadband 
25 cable data distribution system in accordance with the 
present invention ; 

FIGURES 2a and 2b are a flowchart illustrating 
resource allocation control responsive to a Discover 
message in accordance with the present invention; 
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FIGURES 3a and 3b are a flowchart illustrating 
resource allocation control responsive to a Request 
message having a server identifier in accordance with 
the present invention; and 

5 FIGURE 4 is a flowchart illustrating resource 

allocation control responsive to a Request message 
without a server identifier in accordance with the 
present invention. 



Best Mode For Carrying Out The Invention 

10 Referring to Figure 1, a broadband cable data 

distribution system 10 in accordance with the present 
invention is shown having at least one DHCP server 12 
functioning to automatically allocate and assign network 
resources/IP addresses to a plurality of user terminals 

15 14 having a computer 16 connected to server via a cable 
modem 18 and a coaxial cable 20. User terminals could 
also be connected via an Ethernet type connection. 

A lightweight directory access protocol (LDAP) 
directory 22 is connected to the DHCP server and func- 
2 0 tions as a common network user information and access 
privilege database. An LDAP directory server 24 manages 
access to the LDAP directory. 

In general, a DHCP server in accordance with 
the present invention is arranged to support both user 

25 terminal Ethernet interfaces such as Pes, Macs, worksta- 
tions, etc., and user terminal cable modems such as 
LANcity in particular. The DHCP server is also prefer- 
ably arranged to support other potential DHCP users, 
such as RAS dial -in ports with 16-byte hardware address - 

30 es . 
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The DHCP server is provided with suitable 
programming to facilitate transmission of different DHCP 
parameters and option values to users based on a config- 
ured classification of the user device. For example, a 
5 LANcity subscriber premise modem may belong to a "ba- 
sic", "high-bandwidth," or "disconnected" class. A 
LANcity head- end modem could belong to a 11 head- end" 
class. A user terminal Ethernet interface may belong to 
a "standard", " NetBIOS- enabled " , "unregistered", or 
10 "disconnected" class. 

Future service classes may require user 
configuration of current DHCP options, e.g., NetBIOS 
servers and parameters, and future DHCP options such as 
default web servers. The DHCP server is further ar- 
15 ranged to anticipate uncertainty by permitting configu- 
ration of DHCP options on a type-length-value basis. 

In further accordance with the present inven- 
tion, the DHCP server anticipates that multiple IP 
subnets may co-exist on the same Ethernet, and uses a 

2 0 service class designation of the user terminal to 

determine which IP subnet is valid. In particular, the 
DHCP server allows assignment of IP addresses to user 
terminal Ethernet interfaces, and the assignment of 
privately-allocated IP address (from a 10.0.0.0 network) 
25 to LANcity cable modems. The DHCP server also allows 
assignment of different pools of addresses to user 
terminal Ethernet interfaces, such as in situations when 
an IP address conveys special privileges like IP access 
control lists in routers. 

3 0 The DHCP server further anticipates the renum- 

bering of IP networks, and the deliberate partitioning 
of Ethernet networks into multiple LANs . The DHCP 
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server can use a relay agent or BOOTP relay agent IP 
address as a key to the source Ethernet network, but the 
server will not assume a user IP subnet based solely on 
the relay agent address. 

5 While any DHCP server in the system may send 

a DHCP reply based on a previously allocated IP address, 
only a single server will be authorized to allocate a 
new IP address per IP subnet. This considerably reduces 
the possibility of assigning the same IP address to 
10 multiple users. Thus, only a single point of failure 
exists during provisioning of new users, and during 
reconfiguring the network. 

In further accordance with the present inven- 
tion, all DHCP servers obtain respective configuration 
15 parameters, hardware address registration, and current 
binding information from a common network directory. 
This arrangement significantly simplifies the restart of 
a crashed DHCP server, and replacement of an entire DHCP 
server host . 

20 To that end, DHCP servers are arranged to 

support common configuration parameters, a common 
binding directory, and common knowledge of the IP 
address allocation responsibilities for the system. The 
servers are also provided with asynchronous updates of 

25 this information, which is performed under control of a 
system manager located externally to the common network 
directory. 

In further accordance with the present inven- 
tion, an authorized DHCP server can add new hardware 
30 address registrations to the common network directory 
using an "unregistered" service class. If the "unreg- 
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istered" service class is not defined for a particular 
source Ethernet, then the DHCP server will not send a 
DHCP reply. If the "unregistered" service class is 
defined, then the DHCP server sends a DHCP reply tai- 
5 lored for unregistered devices, such as by allocating a 
privately-allocated IP address with no Internet access, 
or an IP address for a self -provisioning web server. An 
"unregistered" service class may be used for technician 
laptop Pes, for current subscribers who have changed 
10 Ethernet boards, and for potential subscribers for 
Internet over cable service demonstrations. 

The use of an unregistered service class thus 
operates as a temporary assignment of an IP address 
assignment. However, there are certain situations where 

15 it may be undesirable to grant user terminals a tempo- 
rary IP address, such as for unregistered LANcity cable 
modems, and RAS dial -in ports on subscriber Windows NT 
servers. The DHCP server should allow the configuration 
of arbitrary hardware address prefixes, and a default 

20 service class for devices matching the prefix (if an 
exact hardware address match is not found) . To disable 
unregistered LANcity cable modems and RAS dial -in ports, 
their unique prefixes would be map to a "disconnected" 
service class . 

25 Using an "unregistered" service class, a user 

terminal will allow the user to access a web server, 
which then allows user authentication and subsequent 
device registration of the user as a new terminal. The 
DHCP server directory is then updated with the device 

30 registration information. Thus, users can change an 
Ethernet interface with minimal operator intervention. 
Such an arrangement facilitates user self -provisioning, 
i.e., registration. 
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The network directory is preferably imple- 
mented as a lightweight directory access protocol (LDAP) 
directory which is pooled among all DHCP servers via a 
LDAP server. The use of an LDAP directory for the DHCP 
5 servers provides DHCP server synchronization and tight 
integration between user personal information such as 
name, street address, e-mail address, and other contact 
information, and user terminal information such as hard- 
ware address, IP address, and logical location informa- 
10 tion. 

The LDAP directory is updated before a DHCP 
server sends a response with a new permanent IP address 
allocation. Distributed DHCP update replicators are 
used to send asynchronous updates as is generally well 

15 understood in the art. If a DHCP server loses its 
connection to the update replicators, then the DHCP 
server re -synchronizes using the LDAP directory. If an 
update replicator loses a connection to a DHCP server, 
then the update replicator also re -synchronizes using 

2 0 the LDAP directory. 

DHCP server data is organized into three 
primary data structures: (1) a hardware address binding 
table; (2) a subnet mapping table; and (3) a service de- 
scription table. More specifically, the hardware 

25 address binding table maps a hardware address to associ- 
ated class information and to its currently assigned IP 
address (if any) . The service class name differentiates 
different types of devices, e.g., subscriber Ethernet 
interfaces versus cable modems, as well as different 

30 user service profiles such as a basic service versus a 
premium. In the preferred embodiment, the fields are 
defined as follows: 
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haddr 


(key) 


The hardware address (also encodes the hardware address type and 
length). 


class 




The name of the service class to which the device belongs. 


ipaddr 




The IP address currently assigned to the hardware address (0.0.0.0 if 
none). 


tmp-ipaddr 




The IP address temporarily allocated to the hardware address (0.0.0.0 
if none). 


hostname 




The hostname of the device (for DNS sync). 


last-server 


(opt) 


The last DHCP server to have assigned the IP address (for DHCP 
server sync). 


lease-time 


(opt) 


The expiration time of the most current lease (for dynamic allocation). 



In addition, a hardware address prefix table 
can be added, and can include "paddr" - the hardware 
10 address prefix including type and length, and "dclass" - 
the default service class for the prefix. 

The subnet mapping table maps an IP subnet to 
the name of the physical Ethernet, and the DHCP server 
(if any) responsible for assigning new addresses for the 

15 IP subnet. The mapping is used to find the physical 
Ethernet of DHCP relays (with non-DHCP assigned address- 
es) as well as DHCP users (with DHCP assigned address- 
es) . If multiple IP subnets co-exist on the same 
Ethernet, they map to the same physical Ethernet name. 

20 In the preferred embodiment, the fields are defined as 
follows : 



subnet 


(key) 


The IP subnet value. 


netmask 




The IP subnet netmask. 


e-name 




The name of the physical Ethernet network. 


server 




The DHCP server responsible for subnet address as- 
signment (0.0.0.0 if none). 
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The service description table maps a service 
class and physical Ethernet name to its IP address 
allocation range and DHCP option profile information. 
Each service description entry has a (possibly empty) 
5 reference to another service description entry, next- 
profile, with "more generic" information. The next- 
profile field allows the operator to build hierarchies 
of service descriptions. In the preferred embodiment, 
the fields are defined as follows: 



class 


(key) 


The service class for one or more devices. 


e-name 


(key) 


The name of the physical Ethernet network. 


ip-range 




The beginning and end of the IP address allocation 
range. 


profile 




Specific values for various DHCP fields and 
options. 


next-profile 




Reference to a profile in a "more generic" service 
description table entry. 



L5 Overall operation of the network resource/IP 

address allocation in accordance with the present 
invention will be described in connection with Figures 
2-4. 

As shown in the flowchart of Figure 2, when a 
20 user terminal wants to find a candidate DHCP server, the 
user terminal sends out a Discover message at block 100. 
The DHCP server is programmed to respond to a Discover 
message by using the hardware address type (htype) , 
hardware address length (hlen) , and user hardware 
25 address (chaddr) from the discover message to find the 
hardware address binding entry at block 102. As shown 
at block 104, if a matching hardware address binding 
entry does not exist, the server determines at block 106 
whether an entry can be created. As noted above, in 
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those situations where it is not desired to create a new 
entry, such as for RAS ports, the DHCP server will not 
reply to the Discover message at block 108. Otherwise, 
at block 110 a new entry is created with class = "unreg- 
5 istered" , e.g., ipaddr = "0.0.0.0", and tmp-ipaddr = 
"0.0.0.0". 

Then at block 112 the service class (class) is 
extracted, and assigned an IP address (ipaddr) , and 
temporary IP address (tmp-ipaddr) from the hardware 

10 address binding entry. If a relay agent address 
(giaddr) of the discover message is not "0.0.0.0," the 
giaddr is used to find the appropriate subnet mapping 
entry at block 114. Otherwise, the Ethernet interface 
address of the DHCP server is used to find the subnet 

15 mapping entry. 

If a matching subnet mapping entry does not 
exist, the DHCP server exits without replying. Other- 
wise the Ethernet name (e-name) and responsible DHCP 
server (server) are extracted from the subnet mapping 
20 entry at block 116. The class from the hardware address 
binding entry and the e-name from the subnet mapping 
entry are used to find the service description entry at 
block 118. 

If a matching service description entry does 
25 not exist, the DHCP exits the routine without replying. 

Otherwise, at block 12 0 the IP address allocation range 
(ip- range) and DHCP option profile information (profile 
and next -prof ile) are extracted from the service de- 
scription entry. At blocks 122 and 124, if tmp-ipaddr 
3 0 is "0.0.0.0," ipaddr is not "0.0.0.0," and ipaddr is 
within the bounds of the ip- range, a DHCP Offer message 
is sent to the user terminal. 
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The Offer message allocates the reserved IP 
address as "your IP address" (yiaddr) and is set to 
ipaddr, while the DHCP server identifier option is set 
to the Ethernet interface address of the DHCP server, 
5 and the DHCP options for subnet mask and IP address 
lease time are derived from the prof ile/next -prof ile 
hierarchy. After sending the Offer message, the DHCP 
server exits the routine at block 126 . 

If the server of the subnet mapping entry is 
10 not equal to this DHCP server, the current DHCP will 
exit the routine without replying. At block 128, if 
tmp- ipaddr is not "0.0. 0.0," and tmp- ipaddr is outside 
the bounds of the ip-range, then tmp- ipaddr is tagged as 
"free" at block 130 and set to " 0 . 0 . 0 . 0 . " If tmp-ipaddr 
15 is not "0.0.0.0" and the tmp-ipaddr is not outside the 

bounds of the IP range, a DHCP Offer message is sent at 
block 132 with yiaddr set to tmp-ipaddr, the DHCP server 
identifier option set to the Ethernet interface address 
of the DHCP server, and the DHCP options for subnet mask 
20 and IP address lease time derived from the prof ile/next - 
profile hierarchy. Again, the DHCP server exits the 
routine at block 134 after sending the Offer message. 

As shown at block 136, if all IP addresses of 
the ip-range are "in use," then an exception is reported 

25 at block 138 and the server exits without replying. 

Otherwise, a "free" IP address is selected in the ip- 
range with a preference for the requested IP address 
option of the discover message. The selected IP address 
is then tagged as "temporarily in use" at block 140, and 

30 stored in tmp-ipaddr in the hardware address binding 
entry at block 142. A DHCP Offer message is then sent 
at block 144 with yiaddr set to tmp-ipaddr, the DHCP 
server identifier option set to the Ethernet interface 
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address of the DHCP server, and the DHCP options for 
subnet mask and IP address lease time derived from the 
prof ile/next -prof ile hierarchy. At block 14 6, after an 
appropriate timer expiration, if tmp-ipaddr IP address 
5 is still 11 temporarily in use, " tmp-ipaddr is tagged as 
"free," and the tmp-ipaddr is cleared in the hardware 
address binding entry. 

When a user sends a Request message to select 
a particular Offer, or to verify/extend an existing 

10 address reservation, a user may verify/extend a lease 
after a user reboot, a renewal time expiration, or a 
rebinding time expiration. The Request message will 
contain a DHCP server identifier option when selecting 
an Offer, and will not contain a server identifier when 

15 verifying/extending a lease. 

Referring now to the flowchart shown in Figure 
3 , a DHCP server is programmed to respond to a Request 
message at block 200 having a server identifier which 
selects an Offer. More specifically, the hardware 
20 address type (htype) , hardware address length (hlen) , 
and user hardware address (chaddr) are used from the 
Request message to find the hardware address binding 
entry at block 202. If a matching hardware address 
binding entry does not exist, then a DHCP Nak message is 
25 sent at block 204 if the server identifier option of the 
Request message references this server. Otherwise the 
server will not reply and exits the routine at block 
206 . 

The service class (class) , assigned IP address 
30 (ipaddr) , and temporary IP address (tmp-ipaddr) are then 
extracted from the hardware address binding entry at 
block 208. If the server identifier option of the 
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Request message refers to another DHCP server, as shown 
at block 210 tmp-ipaddr is tagged as "free" and tmp- 
ipaddr is set to "0.0. 0.0" (if not already "0.0.0.0"), 
and the server exits the routine without replying at 
5 block 212. 

At block 214, if both ipaddr and tmp-ipaddr are 
"0.0.0.0," then a DHCP Nak message is sent at block 216 
and the routine exited at block 218. If tmp-ipaddr is 
not "0.0.0.0," and ipaddr does not equal the requested 

10 IP address option of the Request message as shown at 
block 220, a DHCP Nak message is also sent and the 
routine exited. At block 222, if tmp-ipaddr is 
"0.0.0.0," and ipaddr does not equal the requested IP 
address option of the Request message, then a DHCP Nak 

15 message is sent and the routine exited. 

If a relay agent address (giaddr) of the 
Request message is not "0.0.0.0," the giaddr is used to 
find the subnet mapping entry at block 224. Otherwise, 
the Ethernet interface address of the DHCP server is 

2 0 used to find the subnet mapping entry. If a matching 
subnet mapping entry does not exit, then a DHCP Nak 
message is sent and the routine exited at block 226. 
Otherwise, the Ethernet name (e-name) and responsible 
DHCP server (server) are extracted from the subnet 

25 mapping entry at block 228. 

The class from the hardware address binding 
entry and the e-name from the subnet mapping entry are 
then used to find the service description entry at block 
230. If a matching service description entry does not 
30 exist, then a DHCP Nak message is sent and the routine 
exited. Otherwise, the IP address allocation range (ip- 
range) and DHCP option profile information (profile and 
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next-prof ile) are extracted from the service description 
entry at block 232. 

At block 234, if tmp-ipaddr is "0.0.0.0," and 
ipaddr is outside the bounds of the ip- range, a DHCP Nak 
5 message is sent and the routine exited. At block 23 6, 
if tmp-ipaddr is "0.0.0.0" and ipaddr is within the 
bounds of the ip-range, then a DHCP Ack message is sent 
at block 238. The Ack message should have "your IP 
address" (yiaddr) set to ipaddr, the DHCP server identi- 
10 f ier option set to the Ethernet interface address of the 
DHCP server, and the DHCP options for subnet mask and IP 
address reservation time derived from the prof ile/next- 
profile hierarchy. After sending the Ack message, the 
routine is exited at block 24 0. 

15 If the server of the subnet mapping entry is 

not equal to the current DHCP server, then a DHCP Nak 
message is sent and the routine exited. At block 24 2, 
if tmp-ipaddr is not "0.0. 0.0" and is outside the bounds 
of the ip-range, then at block 244 a DHCP Nak message is 

20 sent, tmp-ipaddr is tagged as "free," and tmp-ipaddr is 
set to "0.0.0.0," after which the routine is exited. 
Otherwise, a DHCP Ack message is sent at block 24 6 
including "your IP address" (yiaddr) set to tmp-ipaddr, 
the DHCP server identifier option set to the Ethernet 

25 interface address of the DHCP server, and the DHCP 
options for subnet mask and IP address reservation time 
derived from the profile/next-profile hierarchy. Then, 
at block 248 tmp-ipaddr is tagged as "permanently in 
use," and tmp-ipaddr is copied to ipaddr and subsequent - 

3 0 ly cleared. 

Referring now to the flowchart shown in Figure 
4, at block 300 the DHCP server is programmed to respond 
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a Request message without a server identifier (verify- 
ing/extending a reservation) by using the hardware 
address type (htype) , hardware address length (hlen) , 
and user hardware address (chaddr) from the Request 
5 message to find the hardware address binding entry at 
block 302. If a matching hardware address binding entry 
does not exist, then a DHCP Nak message is sent and the 
routine exited. Otherwise, the service class (class) 
and assigned IP address (ipaddr) are extracted from the 
10 hardware address binding entry at block 306. 



At block 308, if ipaddr is "0.0.0.0," then a 
DHCP Nak message is sent and the routine exited. If the 
user IP address (ciaddr) of the Request message is not 
"0.0.0.0," and ciaddr does not equal ipaddr, at block 
15 310 a DHCP Nak message is sent and the routine exited. 

If the requested IP address option of the Request 
message does not equal ipaddr, at block 312 a DHCP Nak 
message is sent and the routine exited. 

If a relay agent address (giaddr) of the 
Request message is not "0.0.0.0," giaddr is used to find 
the subnet mapping entry at block 314. Else, if the 
user IP address (ciaddr) of the Request message is not 
"0.0.0.0," then ciaddr is used to find the subnet 
mapping entry. Otherwise, the Ethernet interface 
address of the DHCP server is used to find the subnet 
mapp ing ent ry . 

If a matching subnet mapping entry does not exist, 
at block 316 a DHCP Nak message is sent and the routine 
exited. Otherwise, the Ethernet name (e-name) and 
30 responsible DHCP server (server) is extracted from the 
subnet mapping entry at block 318. The class from the 
hardware address binding entry and the e-name from the 



20 
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subnet mapping entry are used to find the service 
description entry at block 320. If a matching service 
description entry does not exist, a DHCP Nak message is 
sent and the routine exited. 

5 The IP address allocation range (ip-range) and 

DHCP option profile information (profile and next- 
profile) are extracted from the service description 
entry at block 322. If ipaddr is outside the bounds of 
the ip-range at block 324, a DHCP Nak message is sent 

10 and the routine exited at block 326. Otherwise, at 
block 328, a DHCP Ack message is sent. The Ack message 
should have "your IP address" (yiaddr) set to ipaddr, 
the DHCP server identifier option set to the Ethernet 
interface address of the DHCP server, and the DHCP 

15 options for subnet mask and IP address reservation time 
derived from the profile/next-profile hierarchy. 

In addition to the Discover and Request 
messages, a user can send a Decline message to notify 
the DHCP server that the user has a duplicate IP ad- 
20 dress. The DHCP server will report an exception if a 
Decline message is received. Further, a user can also 
send a Release message to terminate an IP address 
reservation prematurely. With automatic allocation, no 
response from the DHCP server is necessary. Also, a 
25 user with a manually-assigned IP address can send an 
Inform message to get other configuration parameters 
from a DHCP server. A DHCP server response is similar 
to the response to a • Request message without a server 
identifier, with the exception of the IP address assign - 
3 0 ment -related processing. 

While the best mode for carrying out. the 
invention has been described in detail, those familiar 
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with the art to which this 
recognize various alternative 
for practicing the invention as 
claims . 



invention relates will 
designs and embodiments 
defined by the following 
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Wfaat Is Claimed Is ; 

1 . In a broadband cable data network where 
information is distributed from at least one DHCP server 
to a plurality of user terminals, a method for automat i- 
5 cally allocating network resources to control access to 
the network comprising: 

generating a discover message from a user 
wanting to receive allocation of a network resource; 

at a DHCP server, detecting user identifica- 
10 tion information from the discover message to determine 
whether an address entry is currently stored for the 
user; 

creating an unregistered class entry and 
assign a temporary IP address to the user if an address 
15 entry does not exist; and 

sending an offer message which communicates 
the temporary IP address to allow limited access to a 
network user registration service. 

2 . The method of claim 1 wherein said IP 
20 address is tagged temporarily in use. 

3 . The method of claim 1 wherein the IP 
address is temporarily assigned, and is stored as an 
address entry. 

4. The method of claim 1 further comprising 
a user selecting an DHCP offer by sending a request 
message identifying the offering server. 

5. The method of claim 4 further comprising 
determining whether an address entry is currently stored 
based on identification information received in the 
request message, and sending an acknowledgement message 
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if an address entry exists indicating a temporary 
address has been assigned. 

6. The method of claim 5 further comprising 
registering the user by changing the assigned IP address 
from a temporary, limited access IP address to a perma- 
nently in use IP address having a predetermined duration 
of valid use. 

7. The method of claim 1 further comprising 
a user selecting an DHCP offer by sending a request 
message not identifying a server. 

8 . The method of claim 4 further comprising 
determining whether an address entry is currently stored 
based on identification information received in the 
request message, and sending an acknowledgement message 
if an address entry exists indicating a temporary 
address has been assigned. 

9. The method of claim 1 further comprising 
determining at the user a duplicate assigned IP address, 
and sending a decline message to the DHCP server indi- 
cating nonacceptance of the offer. 

10. The method of claim 1 further comprising 
sending a release message from the user to cause prema- 
ture termination of the IP address assignment. 
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